Cisco 300-710 Online Practice Questions and Exam Preparation

Cisco 300-710 Online Questions & Answers

• Question 131:

  An organization is installing a new Cisco FTD appliance in the network. An engineer is tasked with configuring access between two network segments within the same IP subnet. Which step is needed to accomplish this task?

  A. Assign an IP address to the Bridge Virtual Interface.
  B. Permit BPDU packets to prevent loops.
  C. Specify a name for the bridge group.
  D. Add a separate bridge group for each segment.
  A. Assign an IP address to the Bridge Virtual Interface.

• Question 132:

  An engineer is configuring Cisco Secure Firewall Threat Defense managed by a Secure Firewall Management Center appliance. The company wants remote access VPN users to be reachable from the inside network. What must the engineer configure to meet the requirements?

  A. manual NAT exemption rule at the top of the NAT policy
  B. manual NAT exemption rule at the bottom of the NAT policy
  C. auto NAT exemption rule at the top of the NAT policy
  D. auto NAT exemption rule at the bottom of the NAT policy
  A. manual NAT exemption rule at the top of the NAT policy

• Question 133:

  An engineer must integrate a third-party security intelligence feed with Cisco Secure Firewall Management Center. Secure Firewall Management Center is running Version 6.2.3 and has 8 GB of memory. Which two actions must be taken to implement Threat Intelligence Director? (Choose two.)

  A. Add a TAXI I server.
  B. Add the URL of the TAXII server.
  C. Upgrade to version 6.6.
  D. Enable REST API access.
  E. Add 7 GB of memory.
  D. Enable REST API access.
  E. Add 7 GB of memory.

• Question 134:

  An administrator needs to configure Cisco FMC to send a notification email when a data transfer larger than 10 MB is initiated from an internal host outside of standard business hours. Which Cisco FMC feature must be configured to accomplish this task?

  A. file and malware policy
  B. application detector
  C. intrusion policy
  D. correlation policy
  D. correlation policy

• Question 135:

  What is a feature of Cisco Secure Endpoint private cloud?

  A. It disables direct connections to the public cloud.
  B. It supports security intelligence filtering.
  C. It support anonymized retrieval of threat intelligence.
  D. It performs dynamic analysis.
  A. It disables direct connections to the public cloud.

• Question 136:

  Which CLI command is used to generate firewall debug messages on a Cisco Firepower?

  A. system support firewall-engine-debug
  B. system support ssl-debug
  C. system support platform
  D. system support dump-table
  A. system support firewall-engine-debug

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212330-firepower-management-center-display-acc.html

• Question 137:

  An administrator is configuring the interface of a Cisco Secure Firewall Threat Defense firewall device in a passive IPS deployment. The device and interface have been identified. Which set of configuration steps must the administrator perform next to complete the implementation?

  A. Set the interface mode to passive. Associate the interface with a security zone. Enable the interface. Set the MTU parameter.
  B. Modify the interface to retransmit received traffic. Associate the interface with a security zone Set the MTU parameter
  C. Set the interface mode to passive. Associate the interface with a security zone. Set the MTU parameter. Reset the interface.
  D. Modify the interface to retransmit received traffic. Associate the interface with a security zone. Enable the interface. Set the MTU parameter.
  A. Set the interface mode to passive. Associate the interface with a security zone. Enable the interface. Set the MTU parameter.

  ---

  In a passive IPS deployment for a Cisco Secure Firewall Threat Defense (FTD) device, the administrator must configure the interface to operate in passive mode. This involves setting the interface mode, associating it with a security zone, enabling the interface, and setting the MTU parameter. Steps: Set the interface mode to passive: Associate the interface with a security zone: Enable the interface: Set the MTU parameter: This ensures that the FTD device can inspect traffic passively without impacting the network flow. References: Cisco Secure Firewall Management Center Device Configuration Guide, Chapter on Interface Settings

• Question 138:

  What is a valid Cisco Secure Endpoint file disposition?

  A. non-malicious
  B. malware
  C. known-good
  D. pristine
  B. malware

• Question 139:

  An engineer currently has a Cisco FTD device registered to the Cisco FMC and is assigned the address of 10 10.50.12. The organization is upgrading the addressing schemes and there is a requirement to convert the addresses to a format that provides an adequate amount of addresses on the network What should the engineer do to ensure that the new addressing takes effect and can be used for the Cisco FTD to Cisco FMC connection?

  A. Delete and reregister the device to Cisco FMC
  B. Update the IP addresses from IFV4 to IPv6 without deleting the device from Cisco FMC
  C. Format and reregister the device to Cisco FMC.
  D. Cisco FMC does not support devices that use IPv4 IP addresses.
  A. Delete and reregister the device to Cisco FMC

• Question 140:

  What is the role of realms in the Cisco ISE and Cisco FMC integration?

  A. Cisco Secure Firewall VDC
  B. Cisco ISE context
  C. TACACS+ database
  D. AD definition
  D. AD definition

  ---

  In the integration between Cisco Identity Services Engine (ISE) and Cisco Firewall Management Center (FMC), realms are used to define the Active Directory (AD) configuration. Realms in FMC specify the AD servers, domain, and other authentication settings necessary to authenticate and authorize users. Steps to configure realms: In FMC, navigate to System > Integration > Realms and Directory. Add a new realm and configure the AD settings. Ensure the realm settings match the AD environment for seamless integration. Realms are essential for integrating AD with FMC, allowing the firewall to use AD for user authentication and policy enforcement. References: Cisco Secure Firewall Management Center Administrator Guide, Chapter on Realms and Directory Integration.